Wpeasypay Wp Easypay — known CVE vulnerabilities

Every CVE whose affected-product data names Wpeasypay Wp Easypay, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-1465 — CVSS 6.1 (medium): The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected…
• CVE-2024-5861 — CVSS 5.3 (medium): The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability…
• CVE-2021-4411 — CVSS 4.3 (medium): The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including…
• CVE-2022-47177 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in WP Easy Pay WP EasyPay – Square for WordPress plugin <= 4.1 versions.